xengi/infra
Watch
0
1
Fork
You've already forked infra
 0
Code Pull requests Activity Actions

add git host

Browse source
This commit is contained in:
XenGi 2026-07-31 11:13:14 +02:00
commit f5f34ba661
Signed by: xengi
SSH key fingerprint: SHA256:jxWM2RTHvxxcncXycwwWkP7HCWb4VREN05UGJTbIPZg
2 changed files with 53 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

43
hosts/git/default.nix Normal file
View file

@ -0,0 +1,43 @@
{ ... }:
{
imports = [
../common.nix
../../services/openssh.nix
../../services/prometheus-node.nix
./forgejo.nix
];
networking = {
hostName = "git";
firewall = {
allowedTCPPorts = [
22 # SSH
80 # HTTP/1
443 # HTTP/2
];
allowedUDPPorts = [
443 # HTTP/3
];
};
};
users.users.root.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMn0SP19A5C8PqdH+99ki3TILozj/U4tBSQxcRRepN21 samuel@pluto"
];
environment.etc."ssh/banner".text = ''
__
__/\ \__
__ /\_\ \ ,_\
/'_ `\/\ \ \ \/
/\ \L\ \ \ \ \ \_
\ \____ \ \_\ \__\
\/___L\ \/_/\/__/
/\____/
\_/__/
'';
services.openssh.settings.Banner = "/etc/ssh/banner";
system.stateVersion = "25.11";
}